$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16ea541e-5028-3f1d-b2e3-41e4566d8ad8.roa File: 16ea541e-5028-3f1d-b2e3-41e4566d8ad8.roa (raw, json) Hash identifier: yA+a1LlLfYQX34Lsbm8IdJ148PQI0zrCLIxEk+9jnWs= Subject key identifier: 8E:74:E3:E8:49:76:3B:1C:F0:56:BC:AD:FB:AB:91:70:1C:AE:37:07 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C69100C7FEE1A64AE4150 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16ea541e-5028-3f1d-b2e3-41e4566d8ad8.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.49.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:69:10:0c:7f:ee:1a:64:ae:41:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=0d760733-cc7d-42f2-9c5e-bd19a011d7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:b3:1e:d2:99:69:f9:dd:60:f4:0f:b6:ac: 23:a2:89:02:13:d1:d4:be:7e:7d:2c:4b:3c:5c:e6: 77:81:63:2e:88:da:f2:42:19:cd:c3:93:b5:f7:dc: ba:19:df:15:21:b4:f2:97:16:25:e3:f0:ed:8e:50: e1:82:e5:81:3f:6f:73:ee:44:bd:cf:0a:30:c5:1d: d4:e6:4a:4d:af:a9:b3:c4:cd:e5:d7:2d:81:b8:da: cf:26:38:34:98:1f:17:2c:25:53:a6:7a:f3:de:4c: e7:3b:0d:69:3d:e2:56:c6:e0:66:6a:4a:ea:03:b9: 31:11:74:d3:83:ae:d4:fa:fd:00:e7:fb:1e:c0:2b: 82:d1:24:81:c8:a9:50:96:97:71:a2:55:32:ba:15: 3b:e4:1a:6b:75:18:87:d1:46:05:6d:5a:69:d9:3d: aa:54:f5:ef:18:fb:e6:86:e5:6c:d9:e3:ef:a8:23: 0c:7c:27:db:f3:1d:23:18:9a:77:a7:61:3b:d5:98: e4:6d:48:57:0d:f6:fe:27:50:a4:9f:49:57:5c:c8: 0b:d8:84:73:41:e6:57:8f:da:14:a7:72:82:f4:74: cf:fb:19:a8:cd:f7:a6:60:2a:40:7e:c9:5f:8d:45: 42:c6:aa:d8:a7:3b:9d:06:57:7a:ef:1d:f4:d4:79: 12:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:74:E3:E8:49:76:3B:1C:F0:56:BC:AD:FB:AB:91:70:1C:AE:37:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16ea541e-5028-3f1d-b2e3-41e4566d8ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:1c:70:a9:e2:a6:1f:51:f3:ab:7a:db:6f:17:02:37:1c:4d: c3:f7:82:4d:21:7e:0b:5c:9f:8d:34:11:d6:cc:7c:a5:8e:52: 62:44:24:79:de:39:e6:a5:e1:a3:ef:1f:80:77:42:2b:7d:81: d7:2f:cf:b7:43:f8:0d:7c:13:ec:b6:d8:7e:a4:b0:95:5c:10: ad:79:ce:8e:e2:8e:7a:58:13:c1:11:9c:2f:bd:18:66:ae:9b: 7c:d6:74:3c:f4:bf:57:58:e2:0e:91:88:a0:b8:05:91:92:42: 66:85:7f:25:1a:67:9e:54:16:d8:f3:b5:8b:68:0f:f2:18:27: f7:86:21:df:1a:6f:99:b7:bd:55:c4:c5:c2:6a:0f:1a:62:72: 51:d3:3c:37:3d:17:82:1c:fe:8d:d0:91:98:78:c2:b4:02:cc: 21:c6:75:91:8c:93:77:52:6f:53:be:c5:7b:33:9e:4b:41:95: dd:78:52:69:a5:cc:71:d7:66:f8:16:dd:75:b8:89:fc:c2:93: 12:69:52:97:55:4a:ee:84:ae:80:87:c2:73:38:cf:b3:67:07: 04:9a:5b:09:76:d7:6f:de:94:21:94:f8:a7:30:ab:d4:f2:f5: 1b:48:46:2a:f8:c9:16:29:48:ef:25:5a:25:ac:3e:be:16:b0: 56:15:b6:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGkQDH/uGmSuQVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MGQ3NjA3MzMtY2M3ZC00MmYyLTljNWUtYmQxOWEwMTFkN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxGzHtKZafndYPQPtqwjookCE9HUvn59LEs8 XOZ3gWMuiNryQhnNw5O199y6Gd8VIbTylxYl4/DtjlDhguWBP29z7kS9zwowxR3U 5kpNr6mzxM3l1y2BuNrPJjg0mB8XLCVTpnrz3kznOw1pPeJWxuBmakrqA7kxEXTT g67U+v0A5/sewCuC0SSByKlQlpdxolUyuhU75BprdRiH0UYFbVpp2T2qVPXvGPvm huVs2ePvqCMMfCfb8x0jGJp3p2E71ZjkbUhXDfb+J1Ckn0lXXMgL2IRzQeZXj9oU p3KC9HTP+xmozfemYCpAfslfjUVCxqrYpzudBld67x301HkS5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI504+hJdjsc8Fa8rfurkXAcrjcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTZlYTU0MWUtNTAyOC0z ZjFkLWIyZTMtNDFlNDU2NmQ4YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQccKniph9R86t6228XAjccTcP3gk0hfgtcn400EdbMfKWOUmJEJHne Oeal4aPvH4B3Qit9gdcvz7dD+A18E+y22H6ksJVcEK15zo7ijnpYE8ERnC+9GGau m3zWdDz0v1dY4g6RiKC4BZGSQmaFfyUaZ55UFtjztYtoD/IYJ/eGId8ab5m3vVXE xcJqDxpiclHTPDc9F4Ic/o3QkZh4wrQCzCHGdZGMk3dSb1O+xXsznktBld14Umml zHHXZvgW3XW4ifzCkxJpUpdVSu6EroCHwnM4z7NnBwSaWwl212/elCGU+Kcwq9Ty 9RtIRir4yRYpSO8lWiWsPr4WsFYVtpA= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:09 2025 by rpki-client